gpk91手柄说明书,ipega9023手柄说明书

首页 > 数码 > 作者:YD1662024-04-21 20:12:12

1.2.3 单引号判断法

正常传参:

{"username": "admin", "password": "admin"}

payload8:

{"username": 'admin', "password": 'admin'}

gpk91手柄说明书,ipega9023手柄说明书(9)

如果改成单引号,报错如上,那么就是jackson。fastjson是不报错的:

gpk91手柄说明书,ipega9023手柄说明书(10)

1.2.4 多余类成员判断法

正常传参:

{"username": "admin", "password": "admin"}

payload9:

{"username": "admin", "password": "admin", "test": 1}

如果报错如下,则说明是jackson:

gpk91手柄说明书,ipega9023手柄说明书(11)

fastjson是不会报错的,这里我们请求doLogin路由来验证:

POST /doLogin?username=admin&password=admin&test=1&rememberme=remember-me HTTP/1.1
Host: 10.0.47.4:8888
Accept: text/html,application/xhtml xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Cookie: JSESSIONID=8D9951E527FEE008DB7B874D70636D86
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36

gpk91手柄说明书,ipega9023手柄说明书(12)

上一页12345下一页

栏目热文

文档排行

本站推荐

Copyright © 2018 - 2021 www.yd166.com., All Rights Reserved.